Juniper Junos J-Web Interface CVE-2018-0001 Remote Code Execution Vulnerability

Bugtraq ID:	103092
Class:	Unknown
CVE:	CVE-2018-0001
Remote:	Yes
Local:	No
Published:	Feb 21 2018 12:00AM
Updated:	Feb 21 2018 12:00AM
Credit:	Cure53
Vulnerable:	Juniper Junos 15.1X53-D64 Juniper Junos 15.1X53-D63 Juniper Junos 15.1X53-D62 Juniper Junos 15.1X53-D60 Juniper Junos 15.1X53-D57 Juniper Junos 15.1X53-D48 Juniper Junos 15.1X53-D47 Juniper Junos 15.1X53-D40 Juniper Junos 15.1X53-D35 Juniper Junos 15.1X53-D30 Juniper Junos 15.1X49-D20 Juniper Junos 15.1X49-D15 Juniper Junos 15.1X49-D10 Juniper Junos 15.1R2 Juniper Junos 15.1R1 Juniper Junos 14.2R7-S6 Juniper Junos 14.2R7-S5 Juniper Junos 14.2R7 Juniper Junos 14.2R6 Juniper Junos 14.2R5 Juniper Junos 14.2R4 Juniper Junos 14.2R3 Juniper Junos 14.2R2 Juniper Junos 14.2R1 Juniper Junos 14.1X53-D42 Juniper Junos 14.1X53-D40 Juniper Junos 14.1X53-D35 Juniper Junos 14.1X53-D30 Juniper Junos 14.1X53-D28 Juniper Junos 14.1X53-D26 Juniper Junos 14.1X53-D25 Juniper Junos 14.1X53-D20 Juniper Junos 14.1X53-D18 Juniper Junos 14.1X53-D16 Juniper Junos 14.1X53-D122 Juniper Junos 14.1X53-D12 Juniper Junos 14.1X53-D10 Juniper Junos 14.1R8-S4 Juniper Junos 14.1R8-S3 Juniper Junos 14.1R8 Juniper Junos 14.1R7 Juniper Junos 14.1R5 Juniper Junos 14.1R4 Juniper Junos 14.1R3 Juniper JUNOS 14.1R2 Juniper Junos 14.1R1 Juniper Junos 12.3X48-D30.7 Juniper Junos 12.3X48-D30 Juniper Junos 12.3X48-D25 Juniper Junos 12.3X48-D20 Juniper Junos 12.3X48-D15 Juniper Junos 12.3X48-D10 Juniper Junos 12.3X48 Juniper Junos 12.3R12.4 Juniper Junos 12.3R12-S4 Juniper Junos 12.3R12-S2 Juniper Junos 12.3R12 Juniper Junos 12.1X46-D66 Juniper Junos 12.1X46-D65 Juniper Junos 12.1X46-D60 Juniper Junos 12.1X46-D55 Juniper Junos 12.1X46-D51 Juniper Junos 12.1X46-D50 Juniper Junos 12.1X46-D46 Juniper Junos 12.1X46-D45 Juniper Junos 12.1X46-D40 Juniper Junos 12.1X46-D37 Juniper Junos 12.1X46-D36 Juniper Junos 12.1X46-D35 Juniper Junos 12.1X46-D30 Juniper Junos 12.1X46-D26 Juniper JUNOS 12.1X46-D25 Juniper Junos 12.1X46-D20.5 Juniper Junos 12.1X46-D20 Juniper Junos 12.1X46-D15 Juniper Junos 12.1X46-D10 Juniper Junos 12.1X46 D25 Juniper JUNOS 12.1X46 D20 Juniper JUNOS 12.1X46 D15 Juniper Junos 12.1X46 D10 Juniper JUNOS 12.1X46 -D10 Juniper Junos 12.1X46
Not Vulnerable:	Juniper Junos 15.1X53-D70 Juniper Junos 15.1X49-D30 Juniper Junos 15.1R3 Juniper Junos 14.2R8 Juniper Junos 14.2R7-S7 Juniper Junos 14.1X53-D50 Juniper Junos 14.1X53-D44 Juniper Junos 14.1R9 Juniper Junos 14.1R8-S5 Juniper Junos 12.3X48-D35 Juniper Junos 12.3R12-S5 Juniper Junos 12.1X46-D67

Juniper Junos J-Web Interface CVE-2018-0001 Remote Code Execution Vulnerability

Juniper Junos is prone to a remote code-execution vulnerability.

Attackers can exploit this issue to execute arbitrary code in the context of the affected application. Failed exploit attempts will likely cause a denial-of-service condition.

Juniper Junos J-Web Interface CVE-2018-0001 Remote Code Execution Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Juniper Junos J-Web Interface CVE-2018-0001 Remote Code Execution Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Juniper Junos J-Web Interface CVE-2018-0001 Remote Code Execution Vulnerability

References:

• Juniper HomePage (Juniper)
  
• 2018-01 Security Bulletin: Junos: Unauthenticated Remote Code Execution through (Juniper)